Tufin Securetrack
7 CVEs affecting Tufin Securetrack. Latest disclosed: 2021-02-09. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18406 | Critical | 9.9 | 2019-06-19 | An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vulnerability when a… |
CVE-2020-13460 | High | 8.8 | 2021-02-09 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA. |
CVE-2020-13409 | Medium | 5.9 | 2021-02-09 | Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later… |
CVE-2020-13408 | Medium | 5.9 | 2021-02-09 | Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later… |
CVE-2020-13407 | Medium | 5.9 | 2021-02-09 | Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later… |
CVE-2020-13462 | Medium | 5.7 | 2021-02-09 | Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA. |
CVE-2020-13461 | Medium | 4.3 | 2021-02-09 | Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided not to fix this vulnerability. Vendor'… |